@ondrej @jtk ADDITIONAL: 1 is probably the EDNS OPT RR (unless dig decrements the displayed count for the EDNS RR which I can't remember if it does), AUTHORITY: 1 is probably an NCACHE SOA?